How to use Device Control Manager to manage what devices types are blocked

Version 10

    Verified Product Versions

    LANDESK Management Suite 9.5LANDESK Management Suite 9.6LANDESK Management Suite 2016.x

    Description

     

    How to use Device Control Manager to block specific devices or interfaces while allowing certain devices access.

    How to Access the Device Control Settings

      1. Open the LANDESK Management Console.
      2. Click Tools | Security and Compliance | Agent Settings
      3. Expand “All Agent Settings”.
      4. Expand "Security"
      5. Under "Endpoint Security" select "Device Control".
      6. In the right-hand pane double click on the Device Control Setting that needs to be adjusted.

     

    How to block all USB but still allow Keyboards and Mouse

      1. From the Device Control setting in question.
      2. Click on Devices.
        • Click on the Interfaces tab.
        • Locate USB and select Block from the drop down menu.
        • Click on the Devices tab.
        • Locate Keyboards and Mice and select Always Allow from the drop down menu.

    How to block a specific device type

      1. From the Device Control setting in question.
      2. Click on Devices.
        1. Locate the device type you want to block.
        2. Select Block from the drop down menu.

     

    How to allow a specific device that is currently being blocked

    Note: This requires that the device has been blocked on a client.

     

      1. Open the LANDESK Management Console.
      2. Click Tools | Security and Compliance | Security Activity
      3. Expand Device Control
      4. Expand "Device Control".
      5. Click on the appropriate category for the device in question.
      6. Locate the Device in question, right click and choose “Add exception…”.
      7. Configure the options in the Configure exception menu.
      8. Description – Something specific for the device.
      9. Parameter – Select the parameter that will identify the device.
      10. Value – This will be auto generated by the Option selection in Parameter.
      11. Access – Define the Access this device will have. It will override the settings selected anywhere else in the Device Control Settings.

     

    For the changes to take place a Vulscan will need to run on the client computer.   To have the changes take place immediately, run a change settings task.  You can run this directly on the client by going to the Run line and running "vulscan /changesettings /showui"